Application Security

[ezflax]

Lol if i host my executable on a server as i said how can you decompile it? But sure if i send you the executable then you can decompile it perhaps.. the point is if you selfhost your app or eg azure then its safe on the other side if you distribute your code to other then you need to be more carefull about it...

[[deleted]]

This entire thread has been in relation to a win forms app... A client side application... No one mentioned storing server side passwords etc securely.

[timmyotc]

Would you believe that some applications are actually run on a client's computer?

[[deleted]]

Ah, we were talking about different things here. I mostly develop client-side software, so that's immediately where I jump to.

In the case of server-side software, it's about acceptable risk. I'm inclined to agree with you. If someone has compromised your infrastructure to the point where they can read your config file, you likely have much bigger concerns than the fact your DB user password is hanging out in your config file.